
$ rpki-client -vvf rpki-rsync.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/C80F1ABFA2D82FD943F357E54256F9D077A237B6.mft
File: C80F1ABFA2D82FD943F357E54256F9D077A237B6.mft (raw, json)
Hash identifier: KK8G325Lk4bbu6kSRYYQrQcB8a0Y6Z4V6YB3u7TUn4o=
Subject key identifier: 8B:CA:5D:BE:0C:FB:FC:2B:7E:5E:DC:2D:62:CE:9D:3F:D8:B1:11:37
Authority key identifier: C8:0F:1A:BF:A2:D8:2F:D9:43:F3:57:E5:42:56:F9:D0:77:A2:37:B6
Certificate issuer: /CN=C80F1ABFA2D82FD943F357E54256F9D077A237B6
Certificate serial: 369D413FF2F6B8BBD7FC8E49E51B0E4EA06867EF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C80F1ABFA2D82FD943F357E54256F9D077A237B6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/C80F1ABFA2D82FD943F357E54256F9D077A237B6.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 20:03:28 +0000
Manifest this update: Tue 16 Jun 2026 19:58:28 +0000
Manifest next update: Wed 17 Jun 2026 21:39:28 +0000
Files and hashes: 1: C80F1ABFA2D82FD943F357E54256F9D077A237B6.crl (hash: YepOPblchpM71GaO6MXYO8wP2UiWabFprvDnD29RXSw=)
2: 323030313a6466333a373030303a3a2f34382d3438203d3e20313332363738.roa (hash: eTUbqesIcChEYqu+yl9YWDoBDuBVF3h4letj7vLE80U=)
3: 3130332e3234312e3230362e302f32342d3234203d3e20313332363738.roa (hash: 2H/9mK1Gr4QoMeN1/HJRUNydjiXw6MJ0Sj7Eb1HaNh8=)
4: 3130332e3234312e3230342e302f32342d3234203d3e20313332363738.roa (hash: CWrmFGiKwBYgiggQgjB1LyJpABcJ6sa0nfq8I7iWRCk=)
5: 3130332e3234312e3230372e302f32342d3234203d3e20313332363738.roa (hash: rMAHdbBBSMXyMeu+J4rW3kenWJVXrRe0ci8BKSszWqY=)
6: 3130332e3234312e3230352e302f32342d3234203d3e20313332363738.roa (hash: q2Hz8tu9y2XkTT2jTbl1zYWtnXBiBpCT7h34gizseqk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/C80F1ABFA2D82FD943F357E54256F9D077A237B6.crl
rsync://rpki-rsync.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/C80F1ABFA2D82FD943F357E54256F9D077A237B6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C80F1ABFA2D82FD943F357E54256F9D077A237B6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 21:39:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:9d:41:3f:f2:f6:b8:bb:d7:fc:8e:49:e5:1b:0e:4e:a0:68:67:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C80F1ABFA2D82FD943F357E54256F9D077A237B6
Validity
Not Before: Jun 16 19:58:28 2026 GMT
Not After : Jun 17 21:39:28 2026 GMT
Subject: CN=8BCA5DBE0CFBFC2B7E5EDC2D62CE9D3FD8B11137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cc:f2:db:41:1d:fb:a9:18:6c:48:33:2d:7b:
eb:e0:ab:b1:5d:1c:f2:b5:e7:f7:4a:82:1b:85:48:
11:59:06:ed:7f:14:09:fc:56:13:e7:8a:68:1b:2f:
c9:9b:36:4c:e0:94:2c:b9:ee:19:f0:e2:85:50:c6:
1b:8f:6c:a5:4d:41:15:18:96:69:b9:4e:b1:20:79:
b1:44:13:55:6f:18:6c:c1:07:14:dc:25:29:75:73:
65:00:d7:64:6b:8b:ca:e8:b1:b7:28:8d:ab:f7:8d:
dd:52:0e:cd:30:00:51:a0:fc:cc:3f:f0:b2:34:51:
56:c8:83:4c:38:27:11:58:cd:23:cc:9f:91:35:4b:
dc:f6:b8:ac:d0:e8:f1:c8:02:1f:ba:cb:70:71:3e:
1e:ab:47:00:09:98:b3:42:da:73:5b:bf:ee:60:81:
ef:2c:60:eb:29:6c:7a:1a:b5:5f:ee:a0:4f:98:fc:
0e:d1:87:aa:39:96:4b:48:08:2e:ac:e9:ee:37:71:
bc:7a:55:0e:a6:2f:01:62:f3:07:78:4a:e8:5d:c1:
7e:7d:6b:51:1c:e9:94:e9:34:f4:f3:04:63:57:bc:
7d:f3:1a:88:85:27:bc:b5:e0:7c:83:35:c1:17:53:
1d:53:16:b5:b1:f0:1b:40:c2:c4:c0:14:1e:f6:6f:
fb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CA:5D:BE:0C:FB:FC:2B:7E:5E:DC:2D:62:CE:9D:3F:D8:B1:11:37
X509v3 Authority Key Identifier:
keyid:C8:0F:1A:BF:A2:D8:2F:D9:43:F3:57:E5:42:56:F9:D0:77:A2:37:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/C80F1ABFA2D82FD943F357E54256F9D077A237B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C80F1ABFA2D82FD943F357E54256F9D077A237B6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/C80F1ABFA2D82FD943F357E54256F9D077A237B6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:4a:3d:94:fd:96:77:53:44:87:65:ba:4e:32:d5:a5:41:94:
2f:a1:cc:96:15:74:df:ac:d1:a2:60:f4:79:d2:ab:31:a1:15:
3e:2f:4b:4d:dc:0a:3e:8c:a6:27:4b:65:55:da:4b:bf:46:7c:
94:f0:9e:9e:33:37:d5:40:02:48:f8:49:11:64:1e:15:2d:dd:
35:bc:9c:20:3c:7b:9e:e8:26:bf:38:6f:da:df:1b:8d:f4:ca:
c9:4d:dc:99:3f:42:d5:3c:a9:a8:e5:92:77:25:e3:05:58:37:
94:ac:7e:75:e6:7a:56:48:f8:d9:90:55:da:1c:8e:64:2d:ac:
04:10:0a:57:1c:b6:60:d7:16:71:20:37:bd:e0:c4:d1:d9:2c:
ce:d9:fb:e7:5b:c8:e8:b9:37:3a:bd:15:3c:c0:48:fb:91:4f:
e8:3d:32:b0:56:e3:45:a2:dd:3a:71:08:76:d4:1f:7c:6e:6d:
57:cf:47:19:45:dd:f8:47:43:5c:fb:23:02:bf:25:3f:bb:8e:
de:0a:d9:17:55:c0:ac:dc:22:fd:3f:1f:25:4a:00:6b:bf:b5:
92:cc:33:e5:38:92:2e:78:9e:36:f2:ee:60:e0:2d:0a:d7:dd:
8c:c6:69:20:27:dc:52:b6:5f:f8:c6:07:82:fc:9f:40:19:77:
ea:62:ac:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:41:22 2026 by rpki-client